Evil-DB LogoEvil-DB
← All CVEs

CVE-2025-7850

critical · 9.3

A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.

9.3
CVSS
3.4%
EPSS (exploit prob.)
88th
EPSS percentile
2025-10-21
Published

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-78

Affected products

VendorProductAffected versions
tp-linker8411_firmware< 1.3.3
tp-linker8411_firmware1.3.3
tp-linker8411all versions
tp-linker7412-m2_firmware< 1.1.0
tp-linker7412-m2_firmware1.1.0
tp-linker7412-m2all versions
tp-linker707-m2_firmware< 1.3.1
tp-linker707-m2_firmware1.3.1
tp-linker707-m2all versions
tp-linker7206_firmware< 2.2.2
tp-linker7206_firmware2.2.2
tp-linker7206all versions
tp-linker605_firmware< 2.3.1
tp-linker605_firmware2.3.1
tp-linker605all versions
tp-linker706w_firmware< 1.2.1
tp-linker706w_firmware1.2.1
tp-linker706wall versions
tp-linker706w-4g_firmware< 1.2.1
tp-linker706w-4g_firmware1.2.1
tp-linker706w-4gall versions
tp-linker7212pc_firmware< 2.1.3
tp-linker7212pc_firmware2.1.3
tp-linker7212pcall versions
tp-linkg36_firmware< 1.1.4
tp-linkg36_firmware1.1.4
tp-linkg36all versions
tp-linkg611_firmware< 1.2.2
tp-linkg611_firmware1.2.2
tp-linkg611all versions
tp-linkfr365_firmware< 1.1.10
tp-linkfr365_firmware1.1.10
tp-linkfr365all versions
tp-linkfr205_firmware< 1.0.3
tp-linkfr205_firmware1.0.3
tp-linkfr205all versions
tp-linkfr307-m2_firmware< 1.2.5
tp-linkfr307-m2_firmware1.2.5
tp-linkfr307-m2all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-7850